Combating the security threats of pen drives
Pen Drives, the high capacity movable storage device of the computer,
is not just a boon for the IT and other business sectors, but it has
been proved to be the most dangerous device to harm any organisation.
While data security and confidentiality matter the most in any
government and private organisation, a pen drive is the most useful
device for the corporate spies or hackers to take data easily and misuse
it.
Among
the threats for an organisation associated with a pen drive, the most
important is transmission of viruses. As most of the antivirus software
fail to detect the viruses in a pen drive or safeguard the computer, a
computer can be easily infected by a virus transmitted through pen
drive. This portable device can be responsible for data loss and data
theft. In corporate sectors, many employees have beenfound taking
malicious software, video clips, computer games, MP3 files, pornography
pictures and other inappropriate files violating corporate rules.However,
restricting a pen drive in a corporate environment is next to
impossible.
They are small enough in size to be carried stealthily and also they
are getting cheaper everyday. These days, the pen drives are available
that can not be identified by a metal detectors as well. Hence, the
security threats involved with a pen drive is hard to combat with.
However, some measures can be chosen to deal with the serious issue.
Educating the user
It is hard to stop the gadget junkies from using pen drives as it has
become the `must-have` for them. And sometimes, pen drives become
essential for any work progress. But it is possible for the office
authorities to educate the users on the use of pen drive while taking
data to their home out of the office or bringing any data to the office.
Lock desktop security:
Many companies are adopting the security policy of locking the
computer automatically when not in use for a few minutes. Though it is a
perfect alternative, using a pen drive or misuse of data are possible
when the computer is unattended by someone. The interval of locking can
be reduced in a high risk environment. In a workstation with access to
sensitive data the lock desktop can prevent misuse of pen drive to a
large extent.
Rigorous anti-virus policies
The company or the corporate authorities should configure antivirus
software to scan and detect every attached drive and removable media.
The users of every interface should be trained to scan the files before
opening them. This can reduce the effect of the virus in case it is
transmitted through a pen drive.
Restriction of USB ports
In the corporate environment or any other place the USB ports of the
desktop computers can be made disabled to prevent the use of pen drive
by the outsiders. In place of the USB port, the legacy port can be used
for using the peripherals. Even software can be used to restrict the
access of end user to the I/O devices and many other plugs and play
devices.
Use of secure devices
Companies should take care of issuing only secure devices to the
employees and also these devices should be approved to purchase. The
users having potential access to sensitive data should be allowed the
devices with security features and they should be trained to use all the
security features
It is barely possible to work in any corporate environment without
the help of a pen drive. But looking at the scenario, where the large
business sectors are facing potential threats due to pen drives
everyday, some of the above security measures can be adapted to, at
least, reduce the hazards of misusing pen drives.
Revolutionizing the storage device with pen drives
Pen drives are the portable USB device with flash memory to store or
transfer audio, video and data files from hard disc of one computer to
another. As the name suggests the device resembles a pen or pencil in
its shape and size and its memory is built in drive. These data storage
devices are equipped with a large amount of memory space.
Generally considered as the improved version of older floppy or
recent compact disc, pen drives with smallest memory space can also
store a large amount of data. Any common type of files that can be
loaded into a floppy or CD can be transferred to a pen drive. Apart from
that pen drives are able to house photos, spreadsheets, word documents,
music tracks, movie clips, etc.
The pen drives are simple to use. One end of the pen drive is
designed to connect to the USB connector of the desktop or the laptop to
get the pen drive activated.
The files are easily dragged and dropped into the memory and can be
forwarded for further use. The function of the pen drives depends on the
operating system available. Pen drives prove to be an easy and practical
way of transmission of data if the laptop or desktop is constructed with
an USB port and the operating system is compatible.
The data and information are stored in the memory of a pen drive in
the form of an array. Memory chip is the backbone of pen drives which
enables multiple read write and reliability.
Pen drives are one of the products of the faster changing technology.
They are constantly changing in their shapes, sizes and storage
capacity. The pen drives also differ in features. Some pen drives come
with in built rechargeable batteries and they get charged when the pen
drive is connected to the USB port of the computer.
Almost all pen drives are developed with the built in sound recorder.
They even give the provision of MP3 playback using a earphone but lack
the clarity of sound. Some pen drives come with mini LCD displays that
help in browsing the MP3 songs stored in them.The technology of pen
drives are changing just as the mobile phones and now the pen drives are
available with micro sized one pixel cameras.
Sooner the market is going to find pen drives with LCD based view
finders.The latest version of the pen drive is gaining popularity and
almost every computer user today is found with one of some capacity or
other.
Is it a necessary evil?
Technology has always been a necessary evil. The more the technology
develops, the greater are the chances of its being abused. Pen drive,
the small storage device used to store and transfer data to and from
computers, has gained popularity due to its functionality. It has got
thousands of uses. Ease of use and convenience is the prime reason of
its popularity.However, like many other equipment, pen drives are also a
necessary evil and pose a potential security threat to the technology
world. When placed in wrong hands, the portability and high storage
capacity of the pen drive can be hazardous.The device has evolved as a
threat to the corporate and other organizations where security of data
is given utmost importance.The threats that are associated with pen
drives are seri
ous. Some of them are listed below:
Stealing of data
Apart from the defence department, the corporate sectors all over the
world are under the threat of data theft for espionage. There is no
dearth of incidents where spies, and hackers are employed to steal data.
A pen drive gives ample opportunity for the theft from an unattached or
unlocked PC with a USB port. It is easy to access data and steal
information like client list, research data or any other information.
The hackers can even bring the software with a pen drive allowing the
user to hack password or other confidential information.
Spreading virus
Earlier, floppy drives and emails were considered as main source of
virus to computers. However, there has been anti-virus software
developed to counter virus and protect the PC. But with pen drive it is
difficult to check the virus with the safeguard as the device can bypass
the protection. It is almost impossible to defend against the viruses
unless and until you have strong anti-virus policies or you are not
scanning all files in your network.
It is easy for a virus writer to corrupt the entire network of a
corporate environment with a pen drive.
Plant malicious software
Virus apart, it is not difficult for anyone to take any spamware and
plant it in the PC. In corporate sectors the threat multiplies when
employees use pen drives to bring unauthorized software or any other
data such as software pranks, sharewares, mp3 files, pornography
pictures, video clips and other inappropriate data that is against the
corporate ethics. As pen drives allow more space, it is easy to bring
bulky software which is impossible with a floppy. Situation worsens when
the software is used to crack password.
Causing data loss
Pen drives barely allow any security system in terms of password or
any other built in security feature. So it is more likely that if a
person loses a pen drive, the data inside it can be accessed by anyone.
If it falls into wrong hands he or she can misuse it. A pen drive can be
easily stolen or misplaced and the data stored inside it can be easily
manipulated. There is large demand for pen drives with some security
systems such as finger-print reader or protective software.
There has been a conscious protest against pen drives in many private
and government organisations. Though it is a convenient device for the
productive brains, it has proved to be beneficial for the thieves as
well. Pen drives are small in size and have greater capacity to store
information.
Hence the thieves can carry the device stealthily in pockets and take
information.Unless and until any drastic step is taken against it, the
security of any organization can be in stake. Even a visitor can
retrieve data easily from an open computer. Considering these threats,
some companies have taken some protective measures for their security by
banning pen drive inside company premises.It can reduce the threat to
some extent. |